Alternative Solution to sapmnt Folder Sharing

Hello
We are installing NW CE 7.1 in Production Environment in Distributed Mode - App Server on one host and DB Server on another host.
The App and DB server OS are Windows Server 2008 R2 and DB is Oracle 11g. We have successfully installed SCS on the app server and now installing DB Server Instance on the DB Host. While installing the same, the SAP Installtion asks for path of SAPMNT.
Our Network Team has informed that due to security reasons, in production data center they will not be able to allow sharing of folder from App Server. They have asked us to check if there is any other way of completing our installation without actually creating folder share on App Server.
We would like to know whether the sharing can be taken out of the server component and the same can be enabled on the different machine and this can be given the UNC path for accessing the same.
Kindly confirm if this is possible and supported by SAP. Also let us  know if there are some other supported options regarding the same.
Regards,
Shubham

Hi,
>> I understand that profile file created during SCS Installation is used by DB Instance while installation so that it can read the profile parameters.
Generally, it is correct.
>> Also the communication between App Server and DB Server will happen on some port 15XX and not file share port.
Central service instance,central instance and dialog instance communicating each other by port 39<instance#> or 36<instance#>
>> So now the question is does DB needs the access to this SAPMNT folder share once the server is started? If can understand if I restart the server the connection might be required as the DB Instance might read the profile file again. Please correct if this understanding is wrong.
J2EE engine use "sapmnt" share at the bootstrap phase to read secure store lib directory. Additionally, at the very beginning of the startup of the J2EE instance, the jcontrol process reads "instance.properties" file by using "saploc" share.
In short these shares should be available by the database instance during the runtime.
>> And If its required does the DB Instance uses this folder share to write any log back to the App Server Log files - defaulttrace, application.log etc?
Trace files will not be generated, if the J2EE engine not started respectfully under "j2ee/cluster/server<x>/log" folder. As a n additional info, even if the shares dropped during the runtime, the system will continue to generate trace files.
I hope that everything is clear.
Best regards,
Orkun Gedik

Similar Messages

  • Regarding Disabling SAPMNT Folder Sharing Impact

    Hello
    We have finished a distribued install of SAP CE 7.1. SCS and PAS is on one App Server, DB on another App Server. For installation we have opened App Server file sharing port to allow DB to access SAPMNT Folder. Our security team feels, it should be closed now and only opened as on need basis. The folder will however be available to access by the Primary Applicaiton Server. Basically they will block the file sharing port
    I would like to know the impact of this on the servers. As I tried, if you do the system still keeps running. So this beings an interesting questions.
    - Why is this folder share required?
    - What happens if we disable it for outside access?
    - Does DB Server instance actually something back to this folder share?
    Any pointers on the same will be helpful.
    Regards,
    ST

    Hi,
    >> I understand that profile file created during SCS Installation is used by DB Instance while installation so that it can read the profile parameters.
    Generally, it is correct.
    >> Also the communication between App Server and DB Server will happen on some port 15XX and not file share port.
    Central service instance,central instance and dialog instance communicating each other by port 39<instance#> or 36<instance#>
    >> So now the question is does DB needs the access to this SAPMNT folder share once the server is started? If can understand if I restart the server the connection might be required as the DB Instance might read the profile file again. Please correct if this understanding is wrong.
    J2EE engine use "sapmnt" share at the bootstrap phase to read secure store lib directory. Additionally, at the very beginning of the startup of the J2EE instance, the jcontrol process reads "instance.properties" file by using "saploc" share.
    In short these shares should be available by the database instance during the runtime.
    >> And If its required does the DB Instance uses this folder share to write any log back to the App Server Log files - defaulttrace, application.log etc?
    Trace files will not be generated, if the J2EE engine not started respectfully under "j2ee/cluster/server<x>/log" folder. As a n additional info, even if the shares dropped during the runtime, the system will continue to generate trace files.
    I hope that everything is clear.
    Best regards,
    Orkun Gedik

  • Beehive enhancement for tomorrow: re-add the OBEO sub folder sharing option

    OK, I inadvertently posted a comment meant for an enhancement to be posted tomorrow, so here we go with tomorrows enhancement of the day:
    Talking once more about delegation... There's quite a big fly in the ointment we need to talk about:
    While delegation granting dialogues in OBEO and bcentral take care of permissions for default folders like inbox, sent items, drafts etc. and pseudo folders like calendar or contacts, it does not so for non-default folders.
    We have the case of a superior that has a widely ramified folder structure and granted his secretary access to parts of it. When the secretary changed he changed delegation, and this did not change the non-default acls.
    So far nothing unspectacular. The issue is, that there is no option in OBEO to define permissions tree-wise (nor is there in beectl), so the superior had to walk the whole directory hierarchy to adapt the permissions, each folder requiring multiple clicks.
    There was a permissions dialogue for that in OBEO 1.5, but has been dropped.
    There is an enhancement request I'd ask you to second through MOS:
    10065126: READD THE SUB FOLDER SHARING OPTION TO OBEO
    This ER had the status approved for future release, but product management changed its plans and put it to "Suggestion Rejected".
    a related ER is the following:
    12557969: OBEO PERMISSIONS DIALOGUE SHOULD HAVE A TREE OPTION
    "The Beehive platform is designed from the ground up to be easy to manage." (cited from "Oracle Beehive: A Flexible Collaboration Platform for the Enterprise") - let's hope product management will give us tree perms management, at least in OBEO.
    Thanks, Tom

    As currently product management does not seem to be considering
    readding the desired dialogue (nor a tree switch for beectl perms
    related commands) lets look at our workaround.
    Lets look at it in an example: user user_a has set up a delegation to
    user_b, allowing access to his inbox.
    If you have set this up (using OBEO or BCentral as alternatives) a new
    Principal Record has emanated, that you can list with "beectl
    list_users":
    bhowner@bhhost:~> beectl list_users email addr@mydomain show more
    Display Record: 1
    ===========================================
    User Identifier: user=user_a
    Family Name: user_a
    Principal Record: 6
    ===============
    Principal Identifier: pcpd=145F:5618:user:9B37CFDA0D624736B413FEF81573597400000000000E -> 145F:5618:user:D8D547BB10AD4C079CE3A2604996535B000000000000,user=user_a
    Principal Name: 145F:5618:user:9B37CFDA0D624736B413FEF81573597400000000000E -> 145F:5618:user:D8D547BB10AD4C079CE3A2604996535B000000000000
    Delegated Principal: Yes
    DELEGATOR: user=user_a
    DELEGATED TO: user=user_b
    Lock status: UNKNOWN.
    bhowner@bhhost:~>
    An ACL to the inbox has been generated:
    bhowner@bhhost:~> beectl list_local_acl --entity "fldr=Inbox,wksp=user_a's Personal Workspace,enpr=myenpr"
    ------------------------------------------------------------------+-------------
    accessor | access_types
    ------------------------------------------------------------------+-------------
    ------------------------------------------------------------------+-------------
    pcpd=145F:5618:user:9B37CFDA0D624736B413FEF81573597400000000000E | +RWDO
    -> 145F:5618:user:D8D547BB10AD4C079CE3A2604996535B000000000000,us |
    er=user_a |
    ------------------------------------------------------------------+-------------
    Listed LocalACL for entity 'fldr=INBOX,wksp=user_a's Personal Workspace,enpr=myenpr'
    bhowner@bhhost:~>
    Now we need to generated similar ACLs for all subfolders of
    exampl-fldr, which, being a non-default folder, did not receive any
    ACL:
    So let's connect to BEE_DATA on the BEEDB, preferrable through SQLDeveloper, and run
    SELECT 'beectl add_local_ace --entity "'
    ||trim(TO_CHAR(c.enterprise_id,'0XXX'))
    ||':'
    ||trim(TO_CHAR(c.site_id,'0XXX'))
    ||':'
    ||c.container_type
    ||':'
    ||c.eid
    ||'" --accessor "pcpd=145F:5618:user:9B37CFDA0D624736B413FEF81573597400000000000E -> 145F:5618:user:D55B885774B6457AA0489F596D7DF873000000000000,user=user_a" --access_types "+RWDO"'
    -- , f.name,
    -- , c.path
    FROM bee_data.ws_real_folders f,
    bee_data.ocs_containers c
    WHERE f.eid=c.eid
    AND c.path LIKE '/dla/user_a''s Personal Workspace/exampl-fldr%'
    AND c.container_type='afrh'
    This will generate the beectl commands necessary to work around the
    missing switch. You need to run those commands afterwards.
    Of course this is not supported, but your only alternative is
    right-clicking all of the subfolders of exampl-fldr and grant the new
    user access manually.
    I would be happy if Oracle would enhance this are of user and rights
    management of beehive.
    Regards, Tom
    Edited by: snmdla on Jan 23, 2012 4:20 PM

  • How to make a folder shared on remote machine

    Consider, we have two machines 'A' and 'B'. On machine 'B' we have a folder with absolute path 'C:\SharedFoderTest\Folder' and this folder is not a shared folder.
    Now, is there any way to make this folder shared with the help of java code which is running at machine 'A'.
    we have:
    1.) machine 'A' and 'B' ip addresses.
    2.) absolute path of non-shared folder on machine 'B'.
    Please let me know is there any way to do this.
    Thanks,
    Rajesh

    Rajesh Panchal wrote:
    Consider, we have two machines 'A' and 'B'. On machine 'B' we have a folder with absolute path 'C:\SharedFoderTest\Folder' and this folder is not a shared folder.
    Now, is there any way to make this folder shared with the help of java code which is running at machine 'A'.
    we have:
    1.) machine 'A' and 'B' ip addresses.
    2.) absolute path of non-shared folder on machine 'B'.
    Please let me know is there any way to do this.Something has to run on B to accomplish that.
    Solution 1:
    - Install SSH server on B.
    - SSH server is running on B.
    - Create java SSH client which logs into B then uses "net share" command to create it.
    Solution 2:
    - Create java server that runs "net share" command when it receives request.
    - Install that server on B.
    - Create java client that calls server.

  • Does simple file and folder sharing on an iMac work with OSX Server?

    Hi There
    I wonder if I should install OSX Server on an iMac wher several users work on the same files and folders.
    My question - before I do something I might regret:
    Does simple file and folder sharing on an iMac within several users really work with the help of OSX Server?
    All I want to be able to do:
    Admin creates a new folder1 and gives it read- and write access for user1 and user2.
    User1 creates a subfolder1 in folder1, and a document1 in subfolder1.
    User2 edits document1. Later Admin edits document1.
    All these simple editing of files and folders (and subfolders) within a main folder should be possible. This is not possible now.
    Is everything clear? I'm not a network specialist or something, I just want to give some co-workers access to some data on my computer without problems.

    So what you need are recursive permissions.
    I suggest you create a group and add user1 and user2 to that group. You can name that group whatever you want, but for now i will call it FSUsers
    Execute this in terminal. Replace FSUsers with your new group
    sudo chmod -R +a "FSUsers allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextat tr,writeextattr,readsecurity,file_inherit,directory_inherit" /Users/Shared/*
    Replace /Users/Shared with the location of your shared folder. Make sure you keep the /* at the end (this allows all subfolders and files to get the same permissions.
    If you need to add people to the share just add them to the FSUsers group, the FSUsers group should should also be allowed in the sharing preferences.

  • Standard FICA datasoources ate missing- Alternative solution

    Hi All,
    Our ISU system is in ECC6 with out any Ehp. CRM-2005 is connected with ISU system through middleware.
    We are missing standard FICA BW datasources( 0FC_BP_ITEMS,0FC_DUN_HEADER,0FC_DUN_ITEMS) due to unavalability of Ehp in the ISU system.
    If Ehp will be apply to ISU system, CRM system need to be upgraded to CRM7 which is not feasible in current time.
    As per BW implementation we need to use these extractors which are based on important FICA tables.As the base table for these extractors will have huge volume of data(Utilities Industry).
    Request you to help us the alternative solution for this without upgrading any Ehp in the ISU system. If we will create custom extractors performance issue may come.
    I have refered the Blogs where performance issue is mentioned for custom extractor.
    Regards,
    Asish

    You listed two of the best options possible...
    1) Upgrade ECC to EHP2 and CRM to CRM 7.0.
    2) Create generic DataSources from the source tables.
    The only other option you would have is to create a remote-enabled FM in your source ECC environment to extract data out of the source table(s) and insert into an ITAB, create an ABAP program in your BW environment that calls the remote-enabled FM and receives the extracted data ITAB and then load that data into a custom table in BW. Then create a generic DataSource on that custom table in BW. Realize, this would pretty much be the same as creating a generic DataSource on the ECC environment, but would be more easily replaced when you do eventually update and potentailly move to the standard content DataSources.

  • BI 7.0 Security: Replace SAP_ALL with alternative solution

    Hello,
    In an effort to remove SAP_ALL from user accounts in BI 7.0, I need to find an alternative solution for allowing users to create, execute, and delete BEx queries.  Initially, I was thinking of creating two roles, derived from the SAP_ALL template.  One role would allow users to create, execute, and delete queries; the other role would allow users to only execute BEx queries.  Since I'm new to BI 7.0, I'm not quite sure if this is the best approach.  If someone has experience with this scenario, please advise.
    Thank you in advance.

    Hi Cedric,
    You definitely need to move away from SAP_ALL in BI 7.0. The blog mentioned explains how the new features of BI 7.0 work, but I feel your issue is a bit more fundamental. Do you have a security strategy / design for your BI reports that you are trying to deploy?
    You need to consider who can access what data in BI as well as which sets of queries. Once you have an idea for that if you look at how the S_RS_COMP authorisation object works, implementing roles with restrictions on that object will achieve restrictions on which users can access which queries.
    There are SAP delivered templates for query execution roles, that you can look at to get you a starting point - but you'll still need to having a good naming convention for queries as well as an understanding of where your BI data is stored, to be able to restrict access.
    Once you've considered the data and reports, you may need to further restrict information by the use of analysis authorisations on specific characteristics, which is where the blog will help you.

  • Deleted public folder sharing

    I was looking at my iMac and in my home folder there was no public folder, however in file sharing my public folder was said to be shared...
    I can create a new folder called public with a sub folder called drop box but it isn't the same as the one OS X creates. I also deleted the sharing of the public folder in the file sharing pane. If I add my own folder that I made, it just says public as the name of the folder shared, not Alex Lyons's Public folder that is there by default when the folder OS X creates is called public in the home folder.
    How do I restore this?
    Regards

    alex.lyons wrote:
    ye I am I restored the public folder with the drop box sub folder. On my MBP the drop box sub folder has a special icon but not on the iMac since I restored it... Also, I know how to add new folders to sharing, but how can I add it so it says Alex Lyons's Public Folder, without the folder being called that?
    it's possible but surprisingly tricky so you might want to leave it alone. see the post by biovizier in this thread:
    http://discussions.apple.com/thread.jspa?messageID=8041195#8041195
    you'll have to log in as root and edit the file he mentioned using some plist editor like Property List Editor which is part of developer tools.

  • Re: Alternative Solution for Field-Groups.

    Dear Experts,
    I have copied one program from older version system to new version system, in this program field groups are used.
    In the new version i have to modify this program as per programming guide lines, so i used Code Inspector(SCI), so in Code Inspector check for field groups error is showing and this error message cannot be hidden using pseudo-comment.
    So anyone could please suggest the alternative solution.
    Below code is used in the program.
    {FIELD-GROUPS: HEADER, ITEM.
    INSERT T001-BUKRS MARA-MATNR INTO HEADER.
    INSERT MAKT-MAKTX MARC-XCHAR T001-BUTXT T001W-NAME1VBBE-OMENG INTO ITEM.
    other processing
    EXTRACT ITEM.
    other processing}

    Hi Friends, I have a requirement as below Source NUM1 123456789 TARGETNUM1,2,3,46,7,8,9.... I WANT TO LOAD FIRST FOUR RECORDS FROM SOUCE INTO SINGLE RECORDS IN TARGET AND SO ON.. PLEASE PROVDE SOLUTION FOR ABOVE SCENARIOTHANKS IN ADVANCE

  • Trackpad in Bootcamp Alternative Solution?

    This is pathetic. We are waiting for Apple to fix a problem that they should've fixed a year ago. I think we should find an alternative solution. The question is what are the alternative options? Who makes the trackpad for the MacBooks? Can we find an alternative driver for Windows? Can someone fix the existing Apple drivers? In terms of functionality, I think a working scroll bar and right-click are the most important. Other features would be a plus, but those two are must-haves for everyone.
    Any thoughts on an alternative solution?

    MacBook Pro with Vista 32bit SP1 boot-camped here.
    What works:
    2-finger scrolling
    Right-click by first placing two fingers on trackpad and then clicking on it with another finger.
    And nothing else, no 3-finger navigation, nothing.
    Comments: This *****.
    What is annoying?...
    First and foremost, this big trackpad is a liability when writing text & numbers: it keeps dramatically interfering / ruining what you are trying to do (your shirt/coat sleeves become very important unwanted actors in your task, sending it to oblivion at times. This is, obviously, as bad in Windas as it is when working with MAC OS!...
    Then, the awkward right-click under Windows is at best stupid - couldn't it mimmic MAC OS X's way (two-finger tap) simply?... If I click on the RIGHT corner of my trackpad I get a right click in MAC OS X - this is acceptable, desirable even, under Windows!...
    I don't even go over the rest. Grievance enough is already contained here, no need to go further...

  • Jinitiator too low 1.1.8.2 when upgrading to jre 1.7.0.45 - alternative solution??

    Hi all,
    There was a recent post on the above subject for which the solution was found to be as below:
    I searched and got the fix for the error -  Jinitiator too low 1.1.8.2 when upgrading to jre 1.7.0.45
    Fix:
    Put the following value in the Runtime parameter of jre 1.7.0.45  in control panel -> java 32 bit icon -> java(tab) -> view
    -Djava.vendor="Sun Microsystems Inc."
    Thereafter, I was able to access the forms/applications in a new browser.
    Question:  Isn't there any alternative solution that jre 1.7.0.45 resolves by itself without putting in the above parameter in the java(tab) -> view and allows to open the applications?
    Please share if anyone has an alternative fix to the above? Reason being we need to pass on the above information for the setup to all the business users what was found as above.
    Thank You for your time
    user10088255

    Hi,
    As far as I know that is the simplest solution you have. If not you have to match the client JRE with the Server JRE.
    But a workaround would be, If all the users are in a specific group of a domain you may follow the below link to set the environment variable for the same group:
    Windows domain-wide setting of Environment Variables at Logon - No Fluff Just Stuff
    HTH!
    Thanks &
    Best Regards,

  • How to avoid Lags ? What is Alternative Solution ?

    I have studied we should always try to use lag as possible in schedule. How can i avoid lags , what is best practice and alternative solution to avoid lags?

    How to Fix a Slow iPad
    http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-A-Slow-iPad.htm
    iPad running slow? How to speed up a slow iPad
    http://appletoolbox.com/2012/07/ipad-running-slow-how-to-speed-up-a-slow-ipad/
    If You Think iOS 7 Feels Slow Here’s How to Speed It Up
    http://osxdaily.com/2013/09/23/ios-7-slow-speed-it-up/
    You may have many apps open which can possibly cause the slowdown and possibly the loss of wifi. In iOS 4-6 double tap your Home button & at the bottom of the screen you will see the icons of all open apps. Close those you are not using by pressing on an icon until all icons wiggle - then tap the minus sign. For iOS 7 users, there’s an easy way to see which apps are open in order to close them. By double-tapping the home button on your iPhone or iPad, the new multitasking feature in iOS 7 shows full page previews of all your open apps. Simply scroll horizontally to see all your apps, and close the apps with a simple flick towards the top of the screen.
     Cheers, Tom

  • VBN1 Multiple bundling alternative solution

    Good afternoon sir/ma'am
    May I know what's the alternative solution or development to solve this problem of the standard 1:1 relationship

    Hello,
    Current SAP R/3 only supports 1:1 free goods.
    Issuing multiple Free Goods (Material B & C) with Main Item (Material A) is not supported currently.
    Kindly search the forum for others ideas like using BOM, but I dont know whether it would practically work or not...
    Hope this clarifies,
    Thanks,
    Jignesh Mehta

  • Having problems with audio jacks, connections are shorting. i need an alternative solution for mixing in logic

    i am having problems with mac pros audio jacks,any alternative solutions ?

    If you're mixing in Logic, buy a FireWire audio interface. So many people make them, that it isn't funny. Personally, I'm a fan of M-Audio interfaces for a cheap, high quality device.
    Here's some FireWire interfaces, they also make USB products.
    http://m-audio.com/index.php?do=products.family&ID=FWinterfaces

  • Alternative solutions to O365 SMTP ?

    Not sure if this is the right place to post this but we are looking for an on-premise alternative solution to the O365 SMTP service which allows for more customizations and granulaity.  Anyone got any recommendations on 3rd party products ?

    Hi,
    I don’t know if there is any third-party products to achieve it. Generally, we can configure custom mail flow by using connectors for on-premises Exchange. For more information about this, please refer to:
    https://technet.microsoft.com/en-us/library/jj723138%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396
    Receive connectors in Exchange 2013
    https://technet.microsoft.com/en-us/library/aa996395(v=exchg.150).aspx
    Regards,
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Winnie Liang
    TechNet Community Support

Maybe you are looking for

  • Installing New OS on New Hard Drive

    My daughter somehow killed the hard drive on her iMac G5 + iSight and, with considerable difficulty, I managed to crack the case and install a new hard drive. She didn't have her original mac disks, so I used the discs that came with my Macbook Pro (

  • Formatting a date like: Friday 24th January

    Formatting a date like: Friday 24th January Is there any way using the Java API to get the 'th' or 'st' bits on the numbers. I can't see it in java.text.SimpleDateFormat Thanks.

  • How do I set the "Save as" location?

    When I download a file, I want to be able to Save as instead of just Save so that I will know where the file is and so I can tell the browser where to put the files. I don't want to have to go to Downloads, find the file, and then extract it in order

  • BC Gallery Module question

    Hi, i want to modify the layout of the standard BC gallery module but can not find it anywhere, Can someone point me in the right direction? I want to remove the table layout and add  my own responsive layout. Thanks

  • Java Script Disable/Enable Items Problem

    Hi, I followed the directions to disable/enable items from http://www.oracle.com/technology/products/database/htmldb/howtos/htmldb_javascript_howto2.html#disable. And I'm getting an error. I have fields like : Issue Summary Issue Description Identifi